Update NEWS

Signed-off-by: Simon McVittie <smcv@collabora.com>

diff --git a/NEWS b/NEWS
index 4dbde994134146f9fc2c5549215a1fc847d771fc..dbe3e13dbf56c49b2edcd1373a2e2ae30d08e2b2 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -9,6 +9,15 @@ Fixes:
   the system bus or leak interesting information in practice.
   (fd.o #107332, Simon McVittie)
 
+• Stop the dbus-daemon leaking memory (an error message) if delivering
+  the message that triggered auto-activation is forbidden. This is
+  technically a denial of service because the dbus-daemon will
+  run out of memory eventually, but it's a very slow and noisy one,
+  because all the rejected messages are also very likely to have
+  been logged to the system log, and its scope is typically limited by
+  the finite number of activatable services available.
+  (dbus#234, Simon McVittie)
+
 • Remove __attribute__((__malloc__)) attribute on dbus_realloc(),
   which does not meet the criteria for that attribute in gcc 4.7+,
   potentially leading to miscompilation (fd.o #107741, Simon McVittie)